Entra Emulator

Local, MSAL-compatible emulator of Microsoft Entra ID (Azure AD) in a single Go binary — the OIDC/OAuth 2.0 v2.0 endpoints MSAL talks to, a minimal read-only Microsoft Graph, and an unauthenticated admin REST API, so you can develop sign-in, token acquisition, and protected-API calls offline with no cloud tenant.

Caution

Local development tool only — intentionally insecure (open admin API, publicly known seeded users/secrets, self-signed TLS, unencrypted signing key). Run it on localhost only.

Start here

• Architecture — how the pieces fit together
• Configuration — environment and origins
• OIDC endpoints — discovery, authorize, token, device code
• Admin REST API — the portal’s control surface
• Roadmap — delivered features and what’s out of scope